Page MenuHomePhabricator

when using ApiBase::PARAM_TYPE => 'integer' without a min or max value, api doesn't validate the input is actually an integer
Closed, ResolvedPublic


Version: 1.18.x
Severity: enhancement



Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 11:15 PM
bzimport set Reference to bz27376.

oops, hit enter by accident.

When you specify a parameter to an api module is an integer with ApiBase::PARAM_TYPE => 'integer', but don't list a max or min value, the api doesn't seem to check its actually an integer. Expected behaviour would be for it to pass the value through intval to turn it into an integer, like it does if a min or max is specified.